Mobile Security
News
AusCERT 2013: Deploying BYOD in a government environment
Strong executive desire to use iPhones led the Department of Sustainability, Environment, Water, Population and Communities to start looking for solutions that would separate government from personal information.
BYOD plus social creating the vector of the future: Frost & Sullivan
The combination of the shift towards mobile platforms for access, and the growth of social media for applications, is creating a “fantastic avenue” for undermining corporate network security, according to Frost & Sullivan.
Engage execs to avoid circumvention on BYOD, security: NAB IT security head
CSOs must inject themselves into strategic business planning conversations early on if they’re to avoid being circumvented by hasty pushes towards BYOD or new online services, the head of the National Australia Bank’s IT security planning has advised.
Mobile users must relearn security, Bitdefender argues as free Android security bows
The release of a free Android security application may simplify the protection of increasingly popular mobile devices, but user ignorance and the proliferation of malware-ridden honeytraps mean users must be targeted with focused education, a security expert has argued.
Apple credits jailbreak team Evad3rs in iOS 6.1.3 security update
Apple released iOS 6.1.3 on Tuesday that fixes six flaws, including four it credited iOS jailbreak developers “Evad3rs” with finding.
Reviews
Review: Mobile Device Management
With the rise of mobile computing -- first via laptops, then smartphones and now tablets -- the IT landscape changed within the enterprise. No more was IT just about the local network, WANs and security for desktops and servers: it now had to incorporate mobile devices, spanning all manner of manufacturers, operating systems, and platforms and to do so without compromising security. The sheer volume of devices and the different software they run is a natural antithesis to network security. Yet, these devices are integral to the way business works today, and so the IT department must adapt.
Opinions
Corporate IT must address employees’ indifference to IT policy
Now that employees increasingly expect the workplace to provide secured any time, anywhere connection – whether over 2G or 3G networks or Wi-Fi, for both personal and business tasks – it’s clear that IT management has lost its mandate on the choice of smartphone and tablet access in the corporate setting.
Managing the mobile security paradigm
There have been profound changes in recent years in the way that people work. Mobility, virtualisation and globalisation have extensively altered how business is conducted. These changes mean that updated and upgraded security systems are needed to ensure data security.
Addressing the security risks of BYO device
The head of security hastily leaves the meeting without excusing herself. Her body language indicates that it is an important call. As she walks back in, all eyes in the room subliminally pose the same question. Without further prompting, the head of security says: “The CEO wants to know why she can’t watch a YouTube video on her iPad. It’s against policy, but we have to make it happen. While we’re at it, she also wants to be able to access her email and calendar on her iPhone”. This actually happened at a large financial institution.
Get exclusive access to CSO, invitation only events, reports & analysis. - 1
Dell targets ANZ security opportunities as SecureWorks debuts locally
- 2
AusCERT 2013: Cloud-based scanner identifies new malware by its ancestry
- 3
AusCERT 2013: Users, cats more likely hack culprits than cyber-espionage: Trustwave
- 4
ACMA database keeps finger on Australia’s malware pulse
- 5
Lethal medical device hack taken to next level
Incident handling is a vast topic, but here are a few tips for you to consider in your incident response. I hope you never have to use them, but the odds are at some point you will and I hope being ready saves you pain (or your job!).
- Have an incident response plan.
- Pre-define your incident response team
- Define your approach: watch and learn or contain and recover.
- Pre-distribute call cards.
- Forensic and incident response data capture.
- Get your users on-side.
- Know how to report crimes and engage law enforcement.
- Practice makes perfect.
Warning: Tips for secure mobile holiday shopping
I’m dating myself, but I remember when holiday shopping involved pouring through ads in the Sunday paper, placing actual phone calls from tethered land lines to research product stock and availability, and actually driving places to pick things up. Now, holiday shoppers can do all of that from a smartphone or tablet in a few seconds, but there are some security pitfalls to be aware of.
